EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 171:

  This kind of password cracking method uses word lists in combination with numbers and special characters:

  A. Hybrid
  B. Linear
  C. Symmetric
  D. Brute Force
  A. Hybrid

• Question 172:

  env x='(){ :;};echo exploit' bash -c `cat/etc/passwd'

  What is the Shellshock bash vulnerability attempting to do on a vulnerable Linux host?

  A. Removes the passwd file
  B. Changes all passwords in passwd
  C. Add new user to the passwd file
  D. Display passwd content to prompt
  D. Display passwd content to prompt

• Question 173:

  Gilbert, a web developer, uses a centralized web API to reduce complexity and increase the Integrity of updating and changing data. For this purpose, he uses a web service that uses HTTP methods such as PUT. POST. GET. and DELETE and can improve the overall performance, visibility, scalability, reliability, and portability of an application. What is the type of web-service API mentioned in the above scenario?

  A. JSON-RPC
  B. SOAP API
  C. RESTful API
  D. REST API
  C. RESTful API

• Question 174:

  Based on the below log, which of the following sentences are true?

  Mar 1, 2016, 7:33:28 AM 10.240.250.23 - 54373 10.249.253.15 - 22 tcp_ip

  A. Application is FTP and 10.240.250.23 is the client and 10.249.253.15 is the server.
  B. Application is SSH and 10.240.250.23 is the server and 10.249.253.15 is the client.
  C. SSH communications are encrypted; it's impossible to know who is the client or the server.
  D. Application is SSH and 10.240.250.23 is the client and 10.249.253.15 is the server.
  D. Application is SSH and 10.240.250.23 is the client and 10.249.253.15 is the server.

• Question 175:

  Due to a slowdown of normal network operations, the IT department decided to monitor internet traffic for all of the employees. From a legal standpoint, what would be troublesome to take this kind of measure?

  A. All of the employees would stop normal work activities
  B. IT department would be telling employees who the boss is
  C. Not informing the employees that they are going to be monitored could be an invasion of privacy.
  D. The network could still experience traffic slow down.
  C. Not informing the employees that they are going to be monitored could be an invasion of privacy.

• Question 176:

  Judy created a forum, one day. she discovers that a user is posting strange images without writing comments.

  She immediately calls a security expert, who discovers that the following code is hidden behind those images:

  What issue occurred for the users who clicked on the image?

  A. The code inject a new cookie to the browser.
  B. The code redirects the user to another site.
  C. The code is a virus that is attempting to gather the users username and password.
  D. This php file silently executes the code and grabs the users session cookie and session ID.
  D. This php file silently executes the code and grabs the users session cookie and session ID.

• Question 177:

  In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it against user accounts located by the application. The larger the word and word fragment selection, the more effective the dictionary attack is. The brute force method is the most inclusive, although slow. It usually tries every possible letter and number combination in its automated exploration. If you would use both brute force and dictionary methods combined together to have variation of words, what would you call such an attack?

  A. Full Blown
  B. Thorough
  C. Hybrid
  D. BruteDics
  C. Hybrid

• Question 178:

  The Heartbleed bug was discovered in 2014 and is widely referred to under MITRE's Common Vulnerabilities and Exposures (CVE) as CVE-2014-0160. This bug affects the OpenSSL implementation of the Transport Layer Security (TLS) protocols defined in RFC6520.

  What type of key does this bug leave exposed to the Internet making exploitation of any compromised system very easy?

  A. Public
  B. Private
  C. Shared
  D. Root
  B. Private

• Question 179:

  John is investigating web-application firewall logs and observers that someone is attempting to inject the following:

  char buff[10];

  buff[>o] - 'a':

  What type of attack is this?

  A. CSRF
  B. XSS
  C. Buffer overflow
  D. SQL injection
  C. Buffer overflow

• Question 180:

  Which Nmap option would you use if you were not concerned about being detected and wanted to perform a very fast scan?

  A. -T5
  B. -O
  C. -T0
  D. -A
  A. -T5